Boris Kochergin who is the Chief Rigor Officer at New York Internet, network administrator at EmPower Solar, network administrator at Ecological, and a programmer at Long Island Solar Energy Industries Association (LISEIA). Needless to say he comes from a skilled background of network administration and can impart some valuable wisdom through his talk "Passive Web Forensics."
Security is a cycle of prevention, detection, response, and recovery. This talk will focus on passively monitoring, logging, and analyzing web traffic at the network level within the context of the latter three of the above steps. The tool we will use is Net Sensor (http://acm.poly.edu/wiki/Net_Sensor), a modular network-analysis suite. There will be an overview of the history of the project, from its beginnings as a Ph.D. dissertation, to a rewrite into a commercial product, to another rewrite into its current open-source form. Emphasis will be placed on the HTTP sensor module, tools for analyzing HTTP data written by the sensor module, and the BitTorrent sensor module, which uses data from the HTTP sensor module in real time.